FOSS Compliance Analyst

Job Description

About the Role

EdgeVerve Systems is looking for a Member – IP Management (FOSS Compliance) to be part of its central FOSS and IP governance function.

The role is responsible for ensuring that all software products and platforms comply with open-source licensing obligations. You will work closely with engineering, DevOps, legal, and product teams to identify, assess, and mitigate open-source compliance risks across the organization.

Direct link to apply - https://jobs.brassring.com/TGnewUI/Search/home/HomeWithPreLoadPageType=JobDetails&partnerid=26209&siteid=5179&Areq=3497BR

Key Responsibilities

• Perform FOSS compliance analysis for software products and platforms

• Identify and analyze open-source licenses (GPL, LGPL, AGPL, MIT, Apache 2.0, BSD)

• Maintain inventory of open-source components across products

• Use SCA tools (Black Duck Hub preferred; Mend, FOSSA, Snyk acceptable)

• Integrate compliance scans into CI/CD pipelines

• Support automation using Python scripting

• Conduct risk assessments and recommend remediation

• Guide teams on open-source best practices

• Support governance, audits, and release readiness

• Collaborate with legal/IP teams

• Stay updated on licensing trends and standards

Required Skills & Experience

• Bachelor's degree in Computer Science / Engineering

• 3+ years in FOSS compliance (3–7 years overall experience)

• Strong knowledge of open-source licensing models

• Hands-on experience with Black Duck or similar tools

• Understanding of dependency mapping and FOSS identification

• Experience working with DevOps and engineering teams

• Ability to understand code (C/C++, Java, Python)

• Python scripting for automation

• Strong analytical and communication skills

Preferred Qualifications

• Experience in container FOSS compliance and SBOM

• Familiarity with SPDX, CycloneDX

• Knowledge of OpenChain standards

• Exposure to legal aspects of open-source compliance

• Experience in large-scale governance environments

• Understanding of modern DevOps practices